Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/BUnRGb7S32s-RgmT9U00NTkl3t8.roa
File: BUnRGb7S32s-RgmT9U00NTkl3t8.roa (raw, json)
Hash identifier: aXx0v4aYokWSGWXbCGr1lCtrsh0rPDnnQqxBiVH5DHg=
Subject key identifier: 05:49:D1:19:BE:D2:DF:6B:3E:46:09:93:F5:4D:34:35:39:25:DE:DF
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0191E4F3CED3597ACFE0B143BE77C66F01F3
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/BUnRGb7S32s-RgmT9U00NTkl3t8.roa
Signing time: Thu 12 Sep 2024 06:37:49 +0000
ROA not before: Thu 12 Sep 2024 06:37:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.59.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:f3:ce:d3:59:7a:cf:e0:b1:43:be:77:c6:6f:01:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Sep 12 06:37:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0549d119bed2df6b3e460993f54d34353925dedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:e9:9a:a3:3f:d9:84:dd:88:f3:b7:cf:fd:
1f:c6:87:91:2a:1d:d5:d5:f0:fe:e4:ba:c9:c1:54:
b1:26:d9:57:0f:e3:04:9d:c4:8b:55:47:38:c5:9c:
59:3a:da:dc:2c:b2:47:1a:a2:62:69:29:1d:2d:ad:
c8:cb:77:c4:68:67:43:2e:e3:fc:7f:73:d6:72:0e:
c8:cd:b3:e4:a1:bd:31:71:16:7b:56:98:b9:ec:05:
ed:69:88:bc:90:dd:5a:f5:bf:35:4c:7a:1d:44:13:
3f:ca:d9:59:20:1a:99:f0:4a:b4:e0:29:bb:b0:f0:
0a:92:90:bc:e0:a1:e9:ea:99:31:8d:8f:48:36:28:
70:73:55:51:09:6f:f8:0f:a5:19:3a:b0:4f:c2:68:
fe:72:22:17:57:08:76:68:6f:7d:61:b4:ae:ad:66:
c4:71:cc:84:54:08:99:1a:a1:b8:b5:10:6b:8d:80:
5e:91:70:7d:9e:47:83:ba:8a:2b:56:df:63:64:bc:
8e:4c:16:91:ea:37:23:23:1a:ff:5c:8e:38:7b:2d:
e0:8e:44:0e:12:92:db:6c:b9:16:56:de:b6:e3:c3:
29:bf:62:08:71:2a:24:06:c4:15:a7:c0:51:82:e4:
53:54:3e:41:bd:44:ae:bd:92:30:05:26:8b:23:b7:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:49:D1:19:BE:D2:DF:6B:3E:46:09:93:F5:4D:34:35:39:25:DE:DF
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/BUnRGb7S32s-RgmT9U00NTkl3t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.7.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8c:54:ec:fe:7a:71:35:65:b0:94:1e:0b:3d:38:0b:aa:fe:
be:31:00:85:20:63:05:89:ef:78:5c:28:74:b2:ae:d2:82:80:
ad:a9:af:8e:4b:e6:ae:99:6f:ef:6d:4e:1c:ad:49:de:42:1c:
8f:5e:1f:31:f0:a7:ac:99:a7:59:c3:65:2b:ed:3c:cf:54:ec:
54:08:b1:95:44:61:2c:1d:28:e2:5d:4f:02:a9:6d:5b:88:ed:
8d:1e:21:00:b5:9c:b7:55:3e:36:f1:1d:d1:97:e9:42:21:10:
7b:c1:03:db:a4:4e:80:3f:39:8a:b7:73:2e:74:6d:2e:88:e3:
ae:7c:c1:0d:96:91:68:cf:5f:5e:f8:c5:b4:25:83:57:3d:f0:
db:ac:e9:2d:a3:ef:a0:9e:99:47:7c:46:ac:2e:fe:c7:49:53:
35:62:82:c4:b7:4f:ed:37:1f:e2:16:15:72:81:35:10:6a:20:
d9:dc:80:d1:af:a3:cd:23:77:33:e2:20:38:d6:1f:df:cf:e6:
f0:26:7c:59:44:e1:91:5a:41:e2:57:eb:49:24:a1:a7:18:fa:
27:97:15:e0:9f:ed:35:13:32:5f:c7:76:ba:81:80:55:ab:e8:
f3:92:eb:67:de:fa:6f:af:df:13:2f:dd:94:41:bc:a7:9c:19:
6c:ee:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:14 2025 by rpki-client